14.161.20.105 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt from IP address 14.161.20.105 on Port 445(SMB)	2019-10-03 00:49:33

Comments on same subnet:

IP	Type	Details	Datetime
14.161.20.223	attackspam	failed_logins	2020-04-26 05:04:15
14.161.20.223	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-04-19 07:29:45
14.161.207.55	attackspambots	Automatic report - Port Scan Attack	2020-02-21 03:07:52
14.161.20.194	attackspambots	2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-04 23:20:58
14.161.20.206	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:20.	2019-10-15 14:58:57
14.161.20.152	attack	Excessive Port-Scanning	2019-08-07 02:22:20
14.161.20.40	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-06 02:55:25,383 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.161.20.40)	2019-07-06 12:55:47

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.20.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35306
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.20.105.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052302 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 24 11:04:19 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 105.20.161.14.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 105.20.161.14.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.75.65.162	attack	Sep 8 11:13:43 saschabauer sshd[11689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.65.162 Sep 8 11:13:45 saschabauer sshd[11689]: Failed password for invalid user system from 106.75.65.162 port 50608 ssh2	2019-09-09 02:14:02
155.4.71.18	attack	SSH invalid-user multiple login try	2019-09-09 02:34:27
130.61.121.78	attackbotsspam	v+ssh-bruteforce	2019-09-09 02:21:11
115.75.218.3	attack	88/tcp [2019-09-08]1pkt	2019-09-09 02:55:33
218.6.224.50	attack	19/9/8@04:07:26: FAIL: Alarm-Intrusion address from=218.6.224.50 19/9/8@04:07:26: FAIL: Alarm-Intrusion address from=218.6.224.50 ...	2019-09-09 02:45:16
103.37.46.52	attack	" "	2019-09-09 02:40:04
193.70.43.220	attackbots	Sep 8 19:51:14 SilenceServices sshd[25579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.43.220 Sep 8 19:51:16 SilenceServices sshd[25579]: Failed password for invalid user test from 193.70.43.220 port 38236 ssh2 Sep 8 19:54:16 SilenceServices sshd[27780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.43.220	2019-09-09 02:12:40
54.39.151.22	attackbotsspam	Sep 8 13:46:05 vps647732 sshd[21910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.151.22 Sep 8 13:46:07 vps647732 sshd[21910]: Failed password for invalid user webdata from 54.39.151.22 port 46698 ssh2 ...	2019-09-09 02:16:17
64.20.36.236	attackbotsspam	Seq 2995002506	2019-09-09 02:35:20
129.204.47.217	attackbotsspam	Sep 8 07:59:22 friendsofhawaii sshd\[658\]: Invalid user student from 129.204.47.217 Sep 8 07:59:22 friendsofhawaii sshd\[658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.47.217 Sep 8 07:59:24 friendsofhawaii sshd\[658\]: Failed password for invalid user student from 129.204.47.217 port 60257 ssh2 Sep 8 08:05:21 friendsofhawaii sshd\[1148\]: Invalid user tomcat from 129.204.47.217 Sep 8 08:05:21 friendsofhawaii sshd\[1148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.47.217	2019-09-09 02:21:55
111.231.226.12	attackbots	Sep 8 07:47:35 ny01 sshd[31340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.226.12 Sep 8 07:47:36 ny01 sshd[31340]: Failed password for invalid user Password123 from 111.231.226.12 port 42660 ssh2 Sep 8 07:53:29 ny01 sshd[32383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.226.12	2019-09-09 02:54:41
185.53.88.70	attackspambots	\[2019-09-08 08:09:30\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-08T08:09:30.067-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7fd9a80e63a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.70/54484",ACLName="no_extension_match" \[2019-09-08 08:12:45\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-08T08:12:45.202-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441217900519",SessionID="0x7fd9a88fa448",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.70/50629",ACLName="no_extension_match" \[2019-09-08 08:15:59\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-08T08:15:59.514-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7fd9a8123cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.70/64062",ACLName="no_exte	2019-09-09 02:29:18
66.154.98.39	attackbots	3389/tcp 3389/tcp 3389/tcp [2019-09-08]3pkt	2019-09-09 02:51:09
176.31.43.255	attackspambots	Sep 8 04:52:19 aat-srv002 sshd[8275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.43.255 Sep 8 04:52:21 aat-srv002 sshd[8275]: Failed password for invalid user ubuntu from 176.31.43.255 port 50344 ssh2 Sep 8 04:56:35 aat-srv002 sshd[8378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.43.255 Sep 8 04:56:37 aat-srv002 sshd[8378]: Failed password for invalid user tester from 176.31.43.255 port 39072 ssh2 ...	2019-09-09 02:43:26
110.80.17.26	attackspambots	Sep 8 13:48:01 xtremcommunity sshd\[92628\]: Invalid user 123456 from 110.80.17.26 port 60624 Sep 8 13:48:01 xtremcommunity sshd\[92628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.17.26 Sep 8 13:48:03 xtremcommunity sshd\[92628\]: Failed password for invalid user 123456 from 110.80.17.26 port 60624 ssh2 Sep 8 13:51:25 xtremcommunity sshd\[92710\]: Invalid user changeme from 110.80.17.26 port 36038 Sep 8 13:51:25 xtremcommunity sshd\[92710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.17.26 ...	2019-09-09 02:05:26

Recently Reported IPs

30.200.100.180	71.3.61.68	93.92.81.58	123.194.41.37
70.208.227.116	169.16.255.192	178.62.245.140	182.254.234.53
91.67.105.22	186.206.210.120	45.13.22.13	197.50.11.98
177.107.184.2	160.153.147.135	185.173.104.47	160.57.195.209
212.162.151.149	147.42.121.249	163.44.198.51	103.3.177.140